2012-11-01

Mystery Writes

We recently observed constant write activity on our development server,
while watching dstat.
With the help of iotop, we identified the Apache web server was the
culprit. But why would apache be doing so many writes? That's not normal
behavior (excluding the the logs).
We then used auditd to log writes by apache.